akanjs 3.0.0-beta.9 → 3.0.0

package/index.ts

@@ -1,13 +1,13 @@
+import type { AkanNativeConfig } from "./vendor/@akanjs/native/packages/cli/src/config.ts";
 import type { AkanI18nConfig } from "akanjs/common";
 import type { AkanImageConfig } from "akanjs/server";
 
 export const archs = ["amd64", "arm64"] as const;
 export type Arch = (typeof archs)[number];
 
-/** One image step. The object form runs only on the matching `TARGETARCH` leg of a multi-arch build. */
+/** The object form runs only on the matching `TARGETARCH` leg of a multi-arch build. */
 export type DockerRun = string | { [key in Arch]?: string };
 
-/** The pieces Akan assembles a Dockerfile from. */
 export interface DockerImageConfig {
   image: string | { [key in Arch]?: string };
   /** Runs before `bun install`, so a system package a native dependency needs is there for the install. */
@@ -17,24 +17,52 @@ export interface DockerImageConfig {
   command: string[];
 }
 
-/**
- * A whole Dockerfile as a string, or the parts Akan assembles one from. The string form is taken verbatim —
- * nothing is merged into it, including the steps a lib contributes through its own `docker`.
- */
+/** The string form is taken verbatim: nothing is merged into it, not even a lib's `docker` steps. */
 export type DockerConfig = string | DockerImageConfig;
 
-/** What an `akan.config.ts` may write for `docker`: a whole Dockerfile, or any subset of the parts. */
 export type DockerOption = string | Partial<DockerImageConfig>;
 
-/**
- * A lib's contribution to the image of every app that mounts it — a lib never picks the base image or the
- * command, only the steps its own runtime needs.
- */
+/** Steps every app mounting the lib inherits; a lib never picks the base image or the command. */
 export interface LibDockerConfig {
   preRuns: DockerRun[];
   postRuns: DockerRun[];
 }
 
+/** `${process.platform}-${process.arch}` of the computer a desktop app is built on, which is the one it runs on. */
+export const binPlatforms = [
+  "darwin-arm64",
+  "darwin-x64",
+  "linux-arm64",
+  "linux-x64",
+  "win32-arm64",
+  "win32-x64",
+] as const;
+export type BinPlatform = (typeof binPlatforms)[number];
+
+/** Downloaded when the desktop app is built; the file must hash to `sha256`, so plain http is as safe as https. */
+export interface AkanBinUrlSource {
+  url: string;
+  sha256: string;
+  /** The executable inside the archive `url` names (.zip, .tar.gz, .tgz, .tar.xz, .tar.bz2, .tar). */
+  file?: string;
+}
+
+/** A file on the building computer, relative to the `akan.config.ts` that declares it. */
+export interface AkanBinPathSource {
+  path: string;
+  /** The executable inside the archive `path` names. */
+  file?: string;
+}
+
+export type AkanBinSource = AkanBinUrlSource | AkanBinPathSource;
+
+/**
+ * Executables a desktop app carries, by the name its code spawns and then by platform. Their folder comes first on
+ * the app's PATH, so the carried server's `spawn("ffmpeg")` runs the carried file; a native plugin finds it in
+ * `ctx.binDir`.
+ */
+export type AkanBinConfig = Record<string, { [platform in BinPlatform]?: AkanBinSource }>;
+
 export interface AkanRouteDomains {
   main?: string[];
   develop?: string[];
@@ -47,39 +75,23 @@ export interface AkanRouteConfig {
   domains: AkanRouteDomains;
 }
 
-/**
- * Which web surfaces an app serves, resolved. `ssr` is the RSC/SSR route renderer and everything it needs —
- * the pages bundle, the client bundles, the RSC worker process. `csr` is the single-file SPA shell that the
- * Capacitor mobile build ships and that `/__csr` serves.
- */
+/** `ssr`: the RSC/SSR renderer with its bundles and RSC worker; `csr`: the SPA shell the native apps ship and `/__csr` serves. */
 export interface AkanWebConfig {
   ssr: boolean;
   csr: boolean;
 }
 
 /**
- * What an `akan.config.ts` may write. `false` is an API-only app — no web artifact is built and no web route
- * is mounted; `true` (the default) is both surfaces. The object form keeps SSR and toggles only the CSR
- * bundle, which is the whole range there is: the CSR bundle inlines the stylesheet the SSR build compiles, so
- * CSR without SSR would ship an unstyled app and is not expressible here.
+ * `false` is an API-only app, `true` (the default) both surfaces; the object form toggles only CSR, because the CSR
+ * bundle inlines the stylesheet the SSR build compiles.
  */
 export type AkanWebOption = boolean | { csr: boolean };
 
-/**
- * How `akan build` trims the `public/` tree it copies into `dist`. Source trees are never touched: an app's
- * and a lib's `public/` keep every file, and only the build's own copy is trimmed.
- */
+/** Trims only the build's own copy of `public/`; source trees keep every file. */
 export interface AkanAssetsConfig {
-  /**
-   * Drop font files from the build's `public/` that no built surface references. A font with `optimize` on is
-   * served from `/_akan/fonts` after subsetting, so its source is a build input the image never reads.
-   */
+  /** Drops fonts no built surface references; an `optimize` font is served subset from `/_akan/fonts`. */
   pruneFonts: boolean;
-  /**
-   * Font files to keep whatever the scan concludes, as globs relative to this app's or lib's own `public/`
-   * (`"fonts/Assistant-*.woff2"`). For the case a scan cannot see: a URL assembled at runtime. Declare it in
-   * the `akan.config.ts` that owns the font, so the reason travels with the lib rather than with the app.
-   */
+  /** Globs relative to the owning app's or lib's `public/`, for fonts a scan cannot see (a runtime-built URL). */
   keepFonts: string[];
 }
 
@@ -87,64 +99,182 @@ export interface AkanAssetsConfig {
 export type LibAssetsConfig = Pick<AkanAssetsConfig, "keepFonts">;
 
 export type DatabaseMode = "single" | "multiple" | "cluster";
-export type MobileEnv = "local" | "debug" | "develop" | "main";
-export type MobilePermission = "camera" | "contacts" | "location" | "push" | "speech";
+export type NativeEnv = "local" | "debug" | "develop" | "main";
+export type NativePermission = "camera" | "contacts" | "location" | "push" | "speech";
 
-export interface AkanMobileTargetAssets {
-  icon?: string;
-  splash?: string;
-}
+export type AkanNativeValue = string | number | boolean | AkanNativeValue[] | { [key: string]: AkanNativeValue };
 
-export interface AkanMobileTargetDeepLinks {
+/**
+ * One bundle id, or one per platform, for an app whose store listings already carry different ids. A platform without
+ * its own takes `default`.
+ */
+export type AkanNativeAppId =
+  | string
+  | { default?: string; ios?: string; android?: string; macos?: string; windows?: string; linux?: string };
+
+export interface AkanNativeDeepLinks {
+  /** Custom URL schemes the app opens (`board://…`). */
   schemes?: string[];
+  /** Hosts whose https links open the app: universal links (iOS, `ios.teamId`) and app links (Android). */
   domains?: string[];
-  ios?: {
-    teamId?: string;
-  };
-  android?: {
-    sha256CertFingerprints?: string[];
-  };
 }
 
-export interface AkanMobileTargetFiles {
-  ios?: Record<string, string>;
-  android?: Record<string, string>;
+/**
+ * Where an installed app looks for newer releases of itself (the native runtime's updates plugin): the whole app on a
+ * desktop, the web bundle on a phone. `akan publish-update` writes and signs a release with a key on this machine;
+ * `akan pack-update` writes an unsigned phone bundle for whoever holds the key to sign.
+ */
+export interface AkanNativeUpdatesConfig {
+  /**
+   * A static base URL, https in a release build: `<url>/<os>-<arch>/<channel>.json` (desktop) or `<url>/<platform>/…`
+   * (a phone's web bundle).
+   */
+  url: string;
+  /** The update key's public half, the raw 32-byte Ed25519 key in base64 (`akan update-keygen` prints it). */
+  publicKey: string;
+  /**
+   * The manifest the app follows, e.g. a "pilot" target's "pilot". Default: the backend env the app is built for
+   * (`main`, `develop`, `debug`, `local`).
+   */
+  channel?: string;
+  /** How long a newly applied release has to call notifyReady() before it is rolled back, ms. Default 10000. */
+  readyTimeout?: number;
 }
 
-export interface AkanCapacitorLikeConfig {
-  plugins?: Record<string, unknown>;
-  android?: Record<string, unknown>;
-  ios?: Record<string, unknown>;
-  [key: string]: unknown;
+export interface AkanNativeIosConfig {
+  /** Where the iOS app starts, over the section's `indexPath`. */
+  indexPath?: string;
+  /** The Apple team id: the universal links of `deepLinks.domains` (apple-app-site-association). */
+  teamId?: string;
+  infoPlist?: Record<string, AkanNativeValue>;
+  entitlements?: Record<string, AkanNativeValue>;
+  /** The app's part of the iOS privacy manifest (PrivacyInfo.xcprivacy), which an App Store upload requires. */
+  privacy?: AkanNativeConfig["privacy"];
+  /** Files copied into the app bundle, keyed by their path there; the value is the source, relative to the app folder. */
+  files?: Record<string, string>;
+}
+
+export interface AkanNativeAndroidConfig {
+  /** Where the Android app starts, over the section's `indexPath`. */
+  indexPath?: string;
+  /** The signing certificates' SHA-256 fingerprints: the app links of `deepLinks.domains` (assetlinks.json). */
+  sha256CertFingerprints?: string[];
+  /** The Firebase project's google-services.json, relative to the app folder, for FCM push. */
+  googleServices?: string;
+  /** The notification channel, status bar icon (relative to the app folder) and accent color of pushes. */
+  push?: NonNullable<AkanNativeConfig["push"]>["android"];
+  /** Media plays with sound without a tap first, as it does on iOS and the desktop: a signage screen. */
+  autoplay?: boolean;
+  /** XML at the `<manifest>` level; `${applicationId}` is replaced. */
+  manifest?: string[];
+  /** XML inside `<application>`. */
+  application?: string[];
+  /** XML inside the app's activity. */
+  activity?: string[];
+  /** Files copied into the app, keyed `res/<type>/<file>` or `assets/<path>`; the value is the source. */
+  files?: Record<string, string>;
+}
+
+export interface AkanNativeDesktopServerConfig {
+  /**
+   * Packages the image installs and the desktop app's server goes without, along with what only they pull in: an
+   * addon that needs the image's system (a ROS install), code only a process the desktop app never starts loads.
+   * The server's own bundle must not import them. The image is unchanged.
+   */
+  omit?: string[];
 }
 
-export interface AkanMobileTargetConfig extends AkanCapacitorLikeConfig {
-  name: string;
+export interface AkanNativeDesktopConfig {
+  /** Where the desktop app starts, over the section's `indexPath`. */
+  indexPath?: string;
+  /**
+   * The desktop app carries the app's server (API only, database mode single, on loopback) and its pages call
+   * nothing else: `true`, or `{ omit }` to carry it without some of the image's packages. `build-desktop`,
+   * `start-desktop` and `publish-update` all read it, and an installed app refuses a release that carries a server
+   * when it has none, or none when it has one.
+   */
+  server?: boolean | AkanNativeDesktopServerConfig;
+  /**
+   * `"reload"`: a window whose page's process ends (a crash, a hang) loads it again every time, waiting
+   * longer after each end in a row, and the app relaunches when the webview's browser process ends — for an
+   * app nobody attends. `"errorPage"` (default): one reload, then an error page, and a quit for the browser.
+   */
+  recovery?: "errorPage" | "reload";
+  /** The main window from its first frame: borderless fullscreen, and no taskbar button (Windows, Linux). */
+  window?: { fullscreen?: boolean; skipTaskbar?: boolean };
+  /**
+   * Windows: `"auto"` answers getDisplayMedia() with the first screen at once, no picker or gesture — remote
+   * support on an unattended screen; it covers every media request, so not for an app that asks for a camera.
+   */
+  screenCapture?: "picker" | "auto";
+  /**
+   * macOS: entitlements of the app's executable beyond what it gets by itself — the JIT's under the hardened runtime and
+   * the camera's or microphone's when a usage text asks for it — e.g. `com.apple.security.cs.disable-library-validation`
+   * for a native addon signed by another team. Read when the app is signed with a team (a Developer ID).
+   */
+  entitlements?: Record<string, AkanNativeValue>;
+}
+
+/**
+ * What a native app (iOS, Android, desktop) is: the app's `native` section and each of its targets have this shape. A
+ * target takes the section and overrides it field by field: objects merge key by key, and any other value — a list
+ * included — replaces the section's.
+ */
+export interface AkanNativeSettings {
+  /** The client the app opens, a basePath the routes declare; an app without basePaths leaves it out. */
   basePath?: string;
+  /**
+   * Where the app starts, and falls back to for a deep link's stack and a back with no history. Default `/`. A platform
+   * section's own `indexPath` (`desktop.indexPath`) wins on that platform.
+   */
   indexPath?: string;
+  /** Default: the app's folder name. */
+  appName?: string;
+  /** Default: one made from the repository's and the app's names. */
+  appId?: AkanNativeAppId;
+  /** Executables, archives and the Swift module; letters, digits, `.`, `_` and `-`. Default: the app's folder name. */
+  fileName?: string;
+  /** Default `0.0.1`. */
+  version?: string;
+  /** Default 1. */
+  buildNum?: number;
+  /** A square PNG, relative to the app folder, or it with the color behind its transparent areas. */
+  icon?: string | { image: string; backgroundColor?: string };
+  /** A PNG shown centered at launch, or the launch screen's color, image and when it hides. */
+  splash?: string | NonNullable<AkanNativeConfig["splash"]>;
+  permissions?: NativePermission[];
+  /** Native runtime plugins beyond the ones the permissions bring: a builtin id (`"iap"`) or a folder, from the app's. */
+  plugins?: string[];
+  deepLinks?: AkanNativeDeepLinks;
+  updates?: Partial<AkanNativeUpdatesConfig>;
+  ios?: AkanNativeIosConfig;
+  android?: AkanNativeAndroidConfig;
+  desktop?: AkanNativeDesktopConfig;
+}
+
+/** `native` in akan.config.ts. Without `targets` the app has one target, named `default`. */
+export interface AkanNativeAppConfig extends AkanNativeSettings {
+  targets?: Record<string, AkanNativeSettings>;
+}
+
+/** One target of the app, its fields over the app's `native` section and the defaults. */
+export interface AkanNativeTarget
+  extends Omit<AkanNativeSettings, "appName" | "appId" | "version" | "buildNum" | "updates"> {
+  name: string;
   appName: string;
-  appId: string;
+  appId: AkanNativeAppId;
   version: string;
   buildNum: number;
-  assets?: AkanMobileTargetAssets;
-  permissions?: MobilePermission[];
-  deepLinks?: AkanMobileTargetDeepLinks;
-  files?: AkanMobileTargetFiles;
+  updates?: AkanNativeUpdatesConfig;
 }
 
-export interface AkanMobileConfig extends AkanCapacitorLikeConfig {
+export interface AkanNativeAppResult {
   appName: string;
-  appId: string;
+  appId: AkanNativeAppId;
+  fileName?: string;
   version: string;
   buildNum: number;
-  targets: Record<string, AkanMobileTargetConfig>;
-}
-
-export interface PluginRuntimeContext {
-  readonly appName: string;
-  readonly mobile: AkanMobileConfig;
-  /** True when any mobile target declares the given permission. */
-  hasMobilePermission(permission: MobilePermission): boolean;
+  targets: Record<string, AkanNativeTarget>;
 }
 
 export interface AkanScanInfo {
@@ -174,49 +304,34 @@ export interface AkanExecutor {
 export interface AkanSyncContext {
   readonly appName: string;
   readonly appPath: string;
-  /** The full app/lib executor for advanced scan-result access and file operations. */
   readonly executor: AkanExecutor;
   getPath(rel: string): string;
   fileExists(rel: string): Promise<boolean>;
+  readFile(rel: string): Promise<string>;
   writeFile(rel: string, content: string, opts?: { overwrite?: boolean }): Promise<void>;
   /** Resolves `env/env.client.ts` and returns its exported `env`, or null when absent/invalid. */
   readEnvClient(): Promise<Record<string, unknown> | null>;
 }
 
-export interface AkanNativeContext {
-  readonly appPath: string;
-  /** The app executor for advanced scan-result access and file operations. */
-  readonly executor: AkanExecutor;
-  readonly target: AkanMobileTargetConfig;
-  readonly operation: "local" | "release";
-  readonly env: MobileEnv;
-  /** Set NS-prefixed usage descriptions in the iOS Info.plist (Debug + Release). */
-  setIosUsageDescriptions(descriptions: Record<string, string>): Promise<void>;
-  /** Merge raw key/values into the iOS Info.plist (Debug + Release). */
-  updateIosInfoPlist(values: Record<string, unknown>): Promise<void>;
-  /** Contribute entries to the iOS entitlements file (merged, then written once per prepare). */
-  addIosEntitlements(entitlements: Record<string, string | string[]>): void;
-  /** Transform `ios/App/App/AppDelegate.swift` in place (no-op when the file is absent). */
-  editIosAppDelegate(transform: (content: string) => string): Promise<void>;
-  /** Add `uses-permission` entries to the Android manifest (without the `android.permission.` prefix). */
-  addAndroidPermissions(permissions: string[]): void;
-  /** Add `uses-feature` entries to the Android manifest. */
-  addAndroidFeatures(features: string[]): void;
-}
-
-export interface AkanPluginCapacitorConfig {
-  /** Mobile permission that activates this plugin's native config (reuses the existing permission model). */
-  permission?: MobilePermission;
-  /** Imperative native (Capacitor) project configuration. */
-  configureNative?: (ctx: AkanNativeContext) => Promise<void>;
+/** What a plugin adds to a native app whose target asks for its permission; the native build merges every one. */
+export interface AkanPluginNativeConfig {
+  permission: NativePermission;
+  /** Native runtime plugins, by builtin id (`"camera"`). */
+  plugins?: string[];
+  /** iOS usage texts by description name (`cameraUsageDescription`); `$(PRODUCT_NAME)` becomes the app name. */
+  usageDescriptions?: Record<string, string>;
+  infoPlist?: Record<string, AkanNativeValue>;
+  entitlements?: Record<string, AkanNativeValue>;
+  /** `uses-permission` names, without the `android.permission.` prefix. */
+  androidPermissions?: string[];
+  /** `uses-feature` names, declared as not required. */
+  androidFeatures?: string[];
 }
 
+/** Read live by the CLI at build time; it carries functions, so it stays out of the serializable config results. */
 export interface AkanPlugin {
   name: string;
-  /** Runtime npm packages this plugin needs; installed on demand by the CLI (e.g. firebase for push). */
-  runtimePackages?: (ctx: PluginRuntimeContext) => string[];
-  /** Native (Capacitor) project configuration. */
-  capacitor?: AkanPluginCapacitorConfig;
+  native?: AkanPluginNativeConfig;
   /** Build-time asset generation (e.g. `public/firebase-messaging-sw.js`). */
   syncAssets?: (ctx: AkanSyncContext) => Promise<void>;
 }
@@ -228,38 +343,50 @@ export interface AkanApiConfig {
   websocketPrefix: string;
 }
 
+export interface AkanDatabaseConfig {
+  /**
+   * The build carries each mode's drivers; a deployment picks one with `AKAN_DATABASE_MODE` (required when there are
+   * several), and `akan start` runs the first unless the shell names another.
+   */
+  modes: DatabaseMode[];
+}
+
 export interface AppConfigResult {
   docker: DockerConfig;
-  defaultDatabaseMode: DatabaseMode;
+  database: AkanDatabaseConfig;
   /**
-   * Where this app mounts its endpoints. Declared here rather than only in `main.ts` because the value is baked
-   * into every client bundle: a prebuilt CSR shell or a mobile bundle never reaches the server that would tell
-   * it otherwise. `new AkanApp({ prefix })` still overrides the server and every server-rendered page.
+   * Baked into every client bundle, since a prebuilt CSR shell or mobile bundle never asks the server;
+   * `new AkanApp({ prefix })` still overrides the server and every server-rendered page.
    */
   api: AkanApiConfig;
   /** Web surfaces built into the app and mounted at boot. Both default to `true`. */
   web: AkanWebConfig;
   routes?: AkanRouteConfig[];
   /**
-   * Mounts `libs/<lib>/page` into this app under `page/(libs)/(<lib>)` on sync. `true` takes every lib
-   * dependency that ships a `page` folder, an array takes exactly the libs listed, `false` (the default)
-   * syncs nothing and removes what a previous sync created.
+   * Mounts `libs/<lib>/page` under `page/(libs)/(<lib>)` on sync: `true` every lib dependency with a `page` folder, an
+   * array exactly those libs, `false` (the default) nothing, removing what a previous sync created.
    */
   syncPageLibs?: string[] | boolean;
   externalLibs: string[];
+  /** Dependencies whose install scripts `bun install --production` runs, in the image and in a desktop app's server. */
+  trustedDependencies: string[];
+  /** Every desktop build, run and dev session carries these, server or not; the image installs through `docker`. */
+  bin: AkanBinConfig;
   barrelImports: string[];
   optimizeImports: string[];
   images: AkanImageConfig;
   i18n: AkanI18nConfig;
   publicEnv: string[];
-  mobile: AkanMobileConfig;
+  native: AkanNativeAppResult;
   secrets: string[];
-  /** How the build trims the `public/` copy it ships. */
   assets: AkanAssetsConfig;
 }
 
 export interface LibConfigResult {
   externalLibs: string[];
+  trustedDependencies: string[];
+  /** Carried by the desktop app of every app that depends on this lib; an app's own entry of the same name wins. */
+  bin: AkanBinConfig;
   /** Image steps every app that mounts this lib inherits, unless that app declares a whole Dockerfile. */
   docker: LibDockerConfig;
   /** Which of this lib's own public fonts every app that mounts it must keep. */
@@ -280,42 +407,32 @@ export interface LibConfigContext {
   readonly type: "lib";
 }
 
-export type AppConfigInput = Omit<DeepPartial<AppConfigResult>, "docker" | "web"> & {
+export type AppConfigInput = Omit<DeepPartial<AppConfigResult>, "docker" | "web" | "bin" | "native"> & {
   docker?: DockerOption;
   web?: AkanWebOption;
+  bin?: AkanBinConfig;
+  native?: AkanNativeAppConfig;
+  plugins?: AkanPlugin[];
+};
+export type LibConfigInput = Omit<DeepPartial<LibConfigResult>, "bin"> & {
+  bin?: AkanBinConfig;
   plugins?: AkanPlugin[];
 };
-export type LibConfigInput = DeepPartial<LibConfigResult> & { plugins?: AkanPlugin[] };
 export interface SubspaceDeclaration {
   /** Short name used on the command line and as the git remote suffix. */
   name: string;
   repo: string;
   /** Apps this subspace serves. Libraries are never listed — they are derived from each app's closure. */
   apps: string[];
-  /**
-   * The cloud workspace this subspace deploys from — its own `AKAN_WORKSPACE_ID`, not this workspace's.
-   * `akan subspace upload-env` is the only thing that reads it.
-   */
+  /** The subspace's own `AKAN_WORKSPACE_ID`, not this workspace's; only `akan subspace upload-env` reads it. */
   workspaceId?: string;
 }
 
-/**
- * What `akan.subspace.ts` at a workspace root may write: the customer repos this workspace is mirrored
- * to. There is no branch field — the branch is whichever one the workspace is on, so one declaration
- * serves every release branch and each of them holds one akanjs version and one copy of the library
- * source.
- */
+/** `akan.subspace.ts`: the repos this workspace mirrors to, on whichever branch the workspace is on. */
 export interface SubspaceConfigInput {
-  /**
-   * Branches a push may target. A feature branch is refused, because pushing it would copy this
-   * workspace's branch namespace into every customer repo.
-   */
+  /** A feature branch is refused: pushing it would copy this workspace's branch namespace into every customer repo. */
   pushableBranches?: string[];
-  /**
-   * Workspace-root entries to keep out of every subspace, on top of the ones that always are. Top-level
-   * names or `dir/` prefixes — a workspace's own infra, release and benchmark trees are the usual
-   * entries.
-   */
+  /** Workspace-root names or `dir/` prefixes kept out of every subspace, on top of the ones that always are. */
   exclude?: string[];
   subspaces: SubspaceDeclaration[];
 }
@@ -339,10 +456,8 @@ export interface FileConventionScanResult {
 }
 
 /**
- * What a *live* scan exposes on `AppInfo.file` / `LibInfo.file`: a set per module kind, with every file
- * type carrying all four kinds. `FileConventionScanResult` above is the serialized form that crosses a
- * process boundary as JSON, which is why it is arrays and why each file type lists only the kinds it can
- * hold. The two are not interchangeable — every reader of `.file` calls `.has()`.
+ * The live form of `FileConventionScanResult` on `AppInfo.file`/`LibInfo.file` (every reader calls `.has()`); the
+ * arrays above are its JSON form, which lists only the kinds each file type can hold.
  */
 export interface FileConventionScanSet {
   all: Set<string>;

package/native/desktop.ts

@@ -0,0 +1,5 @@
+
+
+export { AkanNativeError, mimeFor } from "../vendor/@akanjs/native/packages/core/src/index.ts";
+export type { DesktopContext, DesktopPlugin, NativeEvent } from "../vendor/@akanjs/native/packages/desktop/src/plugin.ts";
+export { createPageVeto, defineDesktopPlugin, externalOpenAllowed } from "../vendor/@akanjs/native/packages/desktop/src/plugin.ts";